Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IE8q0kJTJ38LjSNyMuJt1ztRY8A.roa
File: IE8q0kJTJ38LjSNyMuJt1ztRY8A.roa (raw, json)
Hash identifier: V5p4W77ULT8TDEZskfafyi7J8AqNjdXXikMEvnorQTM=
Subject key identifier: 20:4F:2A:D2:42:53:27:7F:0B:8D:23:72:32:E2:6D:D7:3B:51:63:C0
Certificate issuer: /CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Certificate serial: 088E62C5
Authority key identifier: 4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IE8q0kJTJ38LjSNyMuJt1ztRY8A.roa
Signing time: Wed 15 Jun 2022 05:50:44 +0000
ROA not before: Wed 15 Jun 2022 05:50:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3970
IP address blocks: 151.216.4.0/24 maxlen: 24
151.216.5.0/24 maxlen: 24
2001:7fc:2::/48 maxlen: 48
2001:7fc:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143549125 (0x88e62c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3da6e99c666513a2cee5f0e0d3ab745f167dc3
Validity
Not Before: Jun 15 05:50:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=204f2ad24253277f0b8d237232e26dd73b5163c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:64:b5:8e:95:0b:85:30:0a:d4:5c:b4:70:29:
dc:4f:8c:70:7b:ff:2e:95:0b:e1:e6:94:cc:04:1e:
c2:82:c0:3f:9a:4e:d4:61:39:2c:af:fa:0f:dc:89:
55:64:7a:74:bd:e6:e6:9f:ef:b8:13:f9:c6:2f:72:
e2:d2:c1:1f:e6:c8:a0:a5:ea:66:c3:d5:c2:d2:3c:
b4:cc:52:32:74:e6:c1:0d:3e:30:bb:ba:4c:77:8d:
b6:99:a1:dd:d5:6b:1a:67:b0:73:3a:c6:01:fa:0b:
ce:fe:c2:40:29:8d:ea:78:69:f2:85:09:f0:96:6a:
a9:be:4a:bd:83:d9:d0:b0:e1:83:d6:a0:d8:ef:b1:
5a:f0:d5:70:be:cd:54:65:eb:ea:e4:97:24:11:0e:
2e:eb:d6:5b:dd:de:16:96:d6:17:ef:52:3f:3b:6f:
ce:94:ac:f0:4e:8f:aa:c9:20:39:b0:dd:da:f0:0f:
d8:b3:18:9f:0f:65:97:4a:59:33:db:34:3e:53:99:
a8:5d:63:14:b3:44:c0:43:2f:d5:53:b6:c2:97:c0:
5e:38:6d:85:94:4c:b7:cb:2f:99:e5:85:36:41:31:
79:12:22:ed:2e:79:8a:13:27:24:b7:21:02:9a:82:
b5:d1:f7:2f:9a:ca:82:35:f8:4b:f4:cb:3d:d8:9c:
4d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:4F:2A:D2:42:53:27:7F:0B:8D:23:72:32:E2:6D:D7:3B:51:63:C0
X509v3 Authority Key Identifier:
keyid:4B:3D:A6:E9:9C:66:65:13:A2:CE:E5:F0:E0:D3:AB:74:5F:16:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz2m6ZxmZROizuXw4NOrdF8WfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/IE8q0kJTJ38LjSNyMuJt1ztRY8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6f232e-2275-44e9-91c0-c7397a2669a9/1/Sz2m6ZxmZROizuXw4NOrdF8WfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.216.4.0/23
IPv6:
2001:7fc:2::/47
Signature Algorithm: sha256WithRSAEncryption
3b:41:1c:25:9f:46:15:b3:3a:7b:09:05:d2:bb:07:a2:76:b0:
b9:6d:32:69:08:3a:57:7a:89:a3:a9:40:a4:cc:71:b6:3c:48:
5b:27:01:91:78:3e:94:82:83:e5:c3:bb:f7:55:29:c6:49:0f:
40:56:8b:91:af:41:37:3d:f3:a2:94:4f:b6:fd:10:d5:bf:20:
b2:8a:34:a8:bd:b8:f3:59:69:ef:de:23:51:34:44:31:98:90:
9f:73:74:75:60:84:39:1a:2a:cf:b5:f5:89:0d:6a:f8:23:e5:
94:5e:19:cd:48:16:cd:28:5f:0b:1b:50:e6:89:1f:1a:52:29:
cb:47:29:a8:f2:6c:bc:d0:e1:61:bb:c0:e6:ce:ae:a5:5d:64:
5c:85:9e:b3:5a:4d:64:9c:02:77:c6:cd:68:60:a4:fa:48:3e:
08:c2:7d:82:ea:09:61:8e:f4:b3:c7:ea:45:06:7d:9b:4c:9f:
4d:90:7d:6c:be:fc:51:41:55:85:02:f9:3a:6e:60:24:98:d4:
fa:3e:25:e1:93:90:af:8a:09:7b:55:4b:8f:5a:6a:2f:a0:6b:
d3:b5:0e:28:67:83:92:ce:17:b8:a8:83:26:98:97:ba:ad:67:
be:67:3a:22:ec:be:ae:1d:08:16:bd:47:53:eb:05:b9:d7:e6:
66:f2:ea:24
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIECI5ixTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
YjNkYTZlOTljNjY2NTEzYTJjZWU1ZjBlMGQzYWI3NDVmMTY3ZGMzMB4XDTIyMDYx
NTA1NTA0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjA0ZjJhZDI0MjUz
Mjc3ZjBiOGQyMzcyMzJlMjZkZDczYjUxNjNjMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOtktY6VC4UwCtRctHAp3E+McHv/LpUL4eaUzAQewoLAP5pO
1GE5LK/6D9yJVWR6dL3m5p/vuBP5xi9y4tLBH+bIoKXqZsPVwtI8tMxSMnTmwQ0+
MLu6THeNtpmh3dVrGmewczrGAfoLzv7CQCmN6nhp8oUJ8JZqqb5KvYPZ0LDhg9ag
2O+xWvDVcL7NVGXr6uSXJBEOLuvWW93eFpbWF+9SPztvzpSs8E6PqskgObDd2vAP
2LMYnw9ll0pZM9s0PlOZqF1jFLNEwEMv1VO2wpfAXjhthZRMt8svmeWFNkExeRIi
7S55ihMnJLchApqCtdH3L5rKgjX4S/TLPdicTZMCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQgTyrSQlMnfwuNI3Iy4m3XO1FjwDAfBgNVHSMEGDAWgBRLPabpnGZlE6LO
5fDg06t0XxZ9wzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1N6Mm02WnhtWlJPaXp1WHc0Tk9yZEY4V2ZjTS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWIvNmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8x
L0lFOHEwa0pUSjM4TGpTTnlNdUp0MXp0Ulk4QS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIv
NmYyMzJlLTIyNzUtNDRlOS05MWMwLWM3Mzk3YTI2NjlhOS8xL1N6Mm02WnhtWlJP
aXp1WHc0Tk9yZEY4V2ZjTS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAZfYBDAPBAIAAjAJAwcBIAEH/AAC
MA0GCSqGSIb3DQEBCwUAA4IBAQA7QRwln0YVszp7CQXSuweidrC5bTJpCDpXeomj
qUCkzHG2PEhbJwGReD6UgoPlw7v3VSnGSQ9AVouRr0E3PfOilE+2/RDVvyCyijSo
vbjzWWnv3iNRNEQxmJCfc3R1YIQ5GirPtfWJDWr4I+WUXhnNSBbNKF8LG1DmiR8a
UinLRymo8my80OFhu8Dmzq6lXWRchZ6zWk1knAJ3xs1oYKT6SD4Iwn2C6glhjvSz
x+pFBn2bTJ9NkH1svvxRQVWFAvk6bmAkmNT6PiXhk5Cvigl7VUuPWmovoGvTtQ4o
Z4OSzhe4qIMmmJe6rWe+Zzoi7L6uHQgWvUdT6wW51+Zm8uok
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:46 2023 by rpki-client on console-ams.rpki-client.org